Understanding and configuring administration roles
As a system administrator, you can manage other administration roles and assign permissions to these roles to define their functions in the Management Console. The Role Management page, lets you do the following:
-
View all built-in and custom roles currently in use. See Viewing existing roles.
-
Modify built-in roles. See Modifying the built-in roles.
-
Create new customized roles with the required permissions. See Creating custom roles.
-
Assign the built-in or custom roles, and privileges to individual user accounts. See Assigning roles and privileges to user accounts.
-
Assign the built-in or custom roles, and privileges to Active Directory groups. See Assigning roles and privileges to Azure Active Directory groups.
-
View the Activity Log for changes to built-in and custom roles. See Viewing the Activity Log.
The log captures added or removed roles and permissions, the user who made the changes, the affected users, and the date and time of the modification. The log also records role changes during bulk account import, including the roles assigned or unassigned, the user who performed the action, and the event date and time.
Related information